Re: Apt-get is insecure

2001-12-15 Thread Wichert Akkerman
Previously Torrin wrote: Well, if it's not used (skipped) should we even bother installing debsig-verify and debsigs? Right now it's only useful if you want to play with the technology. Wichert. -- _ [EMAIL PROTECTED]

Re: Exim mail

2001-12-15 Thread Brian P. Flaherty
Daniel Rychlik [EMAIL PROTECTED] writes: How do I stop this from happening. Apparently my bud telented to port 25 and somehow sent mail from my root account. Any suggestions, white papers or links? Id would like to block the telnet application all together, but I dont think thats

Re: Exim mail

2001-12-15 Thread Josh
hmmm, im a bit of a newbie here, but how do you bind a daemon, eg telnetd to a certain nic? __ Do You Yahoo!? Check out Yahoo! Shopping and Yahoo! Auctions for all of your unique holiday gifts! Buy at http://shopping.yahoo.com or bid at

Re: Exim mail

2001-12-15 Thread Brian P. Flaherty
Josh [EMAIL PROTECTED] writes: hmmm, im a bit of a newbie here, but how do you bind a daemon, eg telnetd to a certain nic? Try running xinetd, if you aren't already. In each service block, you can use the 'bind' option, which ties the service to a NIC's IP address. Someone please correct me

Re: Exim mail

2001-12-15 Thread Tim Haynes
[EMAIL PROTECTED] (Brian P. Flaherty) writes: Josh [EMAIL PROTECTED] writes: hmmm, im a bit of a newbie here, but how do you bind a daemon, eg telnetd to a certain nic? Try running xinetd, if you aren't already. In each service block, you can use the 'bind' option, which ties the

Re: Following security issues found upstream

2001-12-15 Thread Jean-Marc Boursot
On Thursday 13 December 2001 20:41, Wichert Akkerman wrote: Previously Javier Fern?ndez-Sanguino Pe?a wrote: I guess a public database could be useful both for We have a private database (well, a status-file in which we keep track of things). A public database can't be used since we

Re: Exim mail

2001-12-15 Thread Warren Turkal
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Saturday 15 December 2001 10:24 am, Tim Haynes wrote: However, you can also do exactly the same thing in exim.conf itself - OTTOMH the directive is `local_interfaces', BICBW. And that directive only matters when exim is running as a daemon

Re: Exim mail

2001-12-15 Thread Daniel Rychlik
- Original Message - From: Brian P. Flaherty [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Saturday, December 15, 2001 8:41 AM Subject: Re: Exim mail Daniel Rychlik [EMAIL PROTECTED] writes: How do I stop this from happening. Apparently my bud telented to port 25 and somehow

Re: Apt-get is insecure

2001-12-15 Thread Wichert Akkerman
Previously Torrin wrote: Well, if it's not used (skipped) should we even bother installing debsig-verify and debsigs? Right now it's only useful if you want to play with the technology. Wichert. -- _ /[EMAIL PROTECTED]

Re: Exim mail

2001-12-15 Thread Brian P. Flaherty
Daniel Rychlik [EMAIL PROTECTED] writes: How do I stop this from happening. Apparently my bud telented to port 25 and somehow sent mail from my root account. Any suggestions, white papers or links? Id would like to block the telnet application all together, but I dont think thats possible.

Re: Exim mail

2001-12-15 Thread Josh
hmmm, im a bit of a newbie here, but how do you bind a daemon, eg telnetd to a certain nic? __ Do You Yahoo!? Check out Yahoo! Shopping and Yahoo! Auctions for all of your unique holiday gifts! Buy at http://shopping.yahoo.com or bid at

Re: Exim mail

2001-12-15 Thread Brian P. Flaherty
Josh [EMAIL PROTECTED] writes: hmmm, im a bit of a newbie here, but how do you bind a daemon, eg telnetd to a certain nic? Try running xinetd, if you aren't already. In each service block, you can use the 'bind' option, which ties the service to a NIC's IP address. Someone please correct me

Re: Exim mail

2001-12-15 Thread Tim Haynes
[EMAIL PROTECTED] (Brian P. Flaherty) writes: Josh [EMAIL PROTECTED] writes: hmmm, im a bit of a newbie here, but how do you bind a daemon, eg telnetd to a certain nic? Try running xinetd, if you aren't already. In each service block, you can use the 'bind' option, which ties the

Re: Following security issues found upstream

2001-12-15 Thread Jean-Marc Boursot
On Thursday 13 December 2001 20:41, Wichert Akkerman wrote: Previously Javier Fern?ndez-Sanguino Pe?a wrote: I guess a public database could be useful both for We have a private database (well, a status-file in which we keep track of things). A public database can't be used since we

Re: Following security issues found upstream

2001-12-15 Thread Wichert Akkerman
Previously Jean-Marc Boursot wrote: Like the last postfix DoS? Am I wrong or there wasn't any bugtraq report for that? There was. Wichert. -- _ /[EMAIL PROTECTED] This space intentionally left occupied \ | [EMAIL

Re: Exim mail

2001-12-15 Thread Warren Turkal
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Saturday 15 December 2001 10:24 am, Tim Haynes wrote: However, you can also do exactly the same thing in exim.conf itself - OTTOMH the directive is `local_interfaces', BICBW. And that directive only matters when exim is running as a daemon

Re: Exim mail

2001-12-15 Thread Daniel Rychlik
- Original Message - From: Brian P. Flaherty [EMAIL PROTECTED] To: debian-security@lists.debian.org Sent: Saturday, December 15, 2001 8:41 AM Subject: Re: Exim mail Daniel Rychlik [EMAIL PROTECTED] writes: How do I stop this from happening. Apparently my bud telented to port 25